CVE-2024-24989
Assigner: f5
Published: 2024-02-14T16:30:26.081Z
State: PUBLISHED
affected: defaultStatus: unknown
modules: HTTP/3
QUIC
product: NGINX Plus
vendor: F5
versions: lessThan: R31 P1
status: affected
version: R31
versionType: custom
defaultStatus: unknown
modules: HTTP/3
QUIC
product: NGINX Open Source
vendor: F5
versions: lessThan: 1.25.4
status: affected
version: 1.25.3
versionType: semver
credits: type: finder
value: F5
datePublic: 2024-02-14T15:00:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: 

<p>When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate.</p><p><strong>Note</strong>: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to <a target="_blank" rel="nofollow" href="https://nginx.org/en/docs/quic.html">Support for QUIC and HTTP/3</a>.<br><br>

NOTE: Software versions which have reached End of Technical Support (EoTS) are not evaluated

<br></p>

<p></p>
value: 
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate.

Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to  Support for QUIC and HTTP/3 https://nginx.org/en/docs/quic.html .



NOTE: Software versions which have reached End of Technical Support (EoTS) are not evaluated









metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-476
description: CWE-476 NULL Pointer Dereference
type: CWE
source: discovery: INTERNAL
title: NGINX HTTP/3 QUIC vulnerability
x_generator: engine: F5 SIRTBot v1.0